Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 19, 2022
Malicious code in pstbssfpresetenv (npm)
- Aug 19, 2022
Malicious code in pslx (npm)
- Aug 19, 2022
Malicious code in psaqko (npm)
- Aug 19, 2022
Malicious code in prtetier (npm)
- Aug 19, 2022
Malicious code in proptyps (npm)
- Aug 19, 2022
Malicious code in promaisepolfill (npm)
- Aug 19, 2022
Malicious code in progressbrwepbackplugin (npm)
- Aug 19, 2022
Malicious code in pretyms (npm)
- Aug 19, 2022
Malicious code in pretyerror (npm)
- Aug 19, 2022
Malicious code in prettyby6es (npm)
- Aug 19, 2022
Malicious code in pottcs (npm)
- Aug 19, 2022
Malicious code in postcsssafeparsear (npm)
- Aug 19, 2022
Malicious code in 8bula (npm)
- Aug 19, 2022
Malicious code in 7np-webpack-pugin (npm)
- Aug 19, 2022
Malicious code in 6ini (npm)
- Aug 19, 2022
Malicious code in 5string (npm)
- Aug 19, 2022
Malicious code in 3exprem (npm)
- Aug 19, 2022
Malicious code in 2jasmie (npm)
- Aug 19, 2022
Malicious code in asfsertx-plus (npm)
- Aug 19, 2022
Malicious code in apth-exists (npm)
- Aug 19, 2022
Malicious code in apollxo-clfient (npm)
- Aug 19, 2022
Malicious code in apa-root-pzatj (npm)
- Aug 19, 2022
Malicious code in aocrn (npm)
- Aug 19, 2022
Malware in reactrdeux
1 compromised version
- Aug 19, 2022
Malware in 3exprem
1 compromised version
- Aug 19, 2022
Malware in prtetier
1 compromised version
- Aug 19, 2022
Malware in apollxo-clfient
1 compromised version
- Aug 19, 2022
Malware in reactdncdhtml5backend
1 compromised version
- Aug 19, 2022
Malware in 5string
1 compromised version
- Aug 19, 2022
Malware in postcsssafeparsear
1 compromised version
- Aug 19, 2022
Malware in rduxsaga
1 compromised version
- Aug 19, 2022
Malware in 6ini
1 compromised version
- Aug 19, 2022
Malware in reacapppolyfill
1 compromised version
- Aug 19, 2022
Malware in rawoader
1 compromised version
- Aug 19, 2022
Malware in rbsove
1 compromised version
- Aug 19, 2022
Malware in 7np-webpack-pugin
1 compromised version
- Aug 19, 2022
Malware in pottcs
1 compromised version
- Aug 19, 2022
Malware in reactroterre3dux
1 compromised version
- Aug 19, 2022
Malware in reacamlotoin
1 compromised version
- Aug 19, 2022
Malware in 2jasmie
1 compromised version
- Aug 19, 2022
Malware in quewynstring
1 compromised version
- Aug 19, 2022
Malware in pretyms
1 compromised version
- Aug 19, 2022
Malware in reactlifecyclesycompat
1 compromised version
- Aug 19, 2022
Malware in rdeepgextend
1 compromised version
- Aug 19, 2022
Malware in pslx
1 compromised version
- Aug 19, 2022
Malware in rbabeaafy
1 compromised version
- Aug 19, 2022
Malware in reactonclcikoutside
1 compromised version
- Aug 19, 2022
Malware in 8bula
1 compromised version
- Aug 19, 2022
Malware in rawbdoy
1 compromised version
- Aug 19, 2022
Malware in reactaddonsshllowcomarfe
1 compromised version
Page 6373 of 6,634